Bug 516009: do stack update after all guards for JSOP_LAMBDA_FC, r=gal

js/src/jstracer.cpp

@@ -12354,7 +12354,6 @@ TraceRecorder::record_JSOP_LAMBDA_FC()
           addName(lir->ins2(LIR_peq, call_ins, INS_NULL()),
                   "guard(js_AllocFlatClosure)"),
           OOM_EXIT);
-    stack(0, call_ins);
 
     if (fun->u.i.nupvars) {
         JSUpvarArray *uva = fun->u.i.script->upvars();
@@ -12368,6 +12367,7 @@ TraceRecorder::record_JSOP_LAMBDA_FC()
         }
     }
 
+    stack(0, call_ins);
     return JSRS_CONTINUE;
 }
 

js/src/trace-test/tests/basic/bug516009.js

@@ -0,0 +1,20 @@
+var gFutureCalls = [];
+
+function add_future_call(index, func)
+{
+    if (!(index in gFutureCalls)) {
+        gFutureCalls[index] = [];
+    }
+}
+
+function check_reset_test(time)
+{
+}
+
+check_reset_test(0);
+
+for (var i = 1; i <= 8; ++i) {
+    (function(j) {
+        add_future_call(j, function() { check_reset_test(j); });
+    })(i);
+}